Cybersafety: A System-Theoretic Approach to Identify Cyber-Vulnerabilities & Mitigation Requirements in Industrial Control Systems
Not Available
97 MATHEMATICS AND COMPUTING↗
SEARCH · Search NASA
Results for “System Security”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Privacy-Assured Aggregation Protocol for Smart Metering: A Proactive Fault-Tolerant Approach [Proactive Fault-Tolerant Aggregation Protocol for Privacy-Assured Smart Metering]
Smart meters are integral to demand response in emerging smart grids, by reporting the electricity consumption of users to serve application needs. But reporting real-time usage information for individual households raises privacy concerns. Existing techniques to guarantee differential privacy (DP) of smart meter users either are not fault tolerant or achieve (possibly partial) fault tolerance at high communication overheads. In this paper, we propose a fault-tolerant protocol for smart metering that can handle general communication failures while ensuring DP with significantly improved efficiency and lower errors compared with the state of the art. Our protocol handles fail-stop faults proactively by using a novel design of future ciphertexts, and distributes trust among the smart meters by sharing secret keys among them. We prove the DP properties of our protocol and analyze its advantages in fault tolerance, accuracy, and communication efficiency relative to competing techniques. We illustrate our analysis by simulations driven by real-world traces of electricity consumption.
32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
Simulated X-Ray Radiographic Performance of a Bismuth-Loaded PVT Array
Recent material advancements in organic plastic scintillators enable marked increases in material detection efficiency, light yield, and pulse shape discrimination properties. These advances may resolve significant capability gaps for lowcost, portable, and durable dual-particle imaging (DPI) systems for nuclear safety, security, and safeguard purposes. One such material, a 21% bismuth-loaded polyvinyl toluene (BiPVT), is computationally evaluated as a small, pixelated radiographic array using Monte Carlo N-Particle (MCNP) and Zemax OpticStudio, and it is compared to identical evaluations of EJ-200 and EJ-256 arrays. MCNP software enables estimates of particle interaction and energy deposition, while OpticStudio computes optical light transport within each material. Here, computational estimates of spatial resolution and relative light collection at 370 kVp are found to agree with experimental results for both EJ-200 and EJ-256 arrays, thereby validating predictions of the same for the BiPVT array. As such, for equivalent exposures at 370 kVp, a BiPVT array may provide ~20× the light collection expected from EJ-200 and ~10× that expected from EJ-256. Similar comparisons of estimated light collection are also computed at 150 and 270 kVp, and these results suggest that BiPVT will provide significantly improved performance over EJ-200 and EJ-256 across all energies practical for portable X-ray radiography.
42 ENGINEERING↗
SU-E-E-02: Dashboard for Tracking Physics Resident Progress
Purpose: Design a system to easily and securely track the progress of medical physics residents through their residency. Paper sign-offs while offering a real signature are not easily updated or summarized. A resident or mentor needs to be able to quickly assess what the current assignments are, what are overdue, and whether the resident is on track to complete all the tasks in a timely fashion. An electronic version can accomplish all these goals. Methods: An electronic dashboard was created in excel to not only house the tasks and sign-off but to succinctly summarize the residents progress. The first tab contains the dashboard which displays tables of the progress of the residents in each rotation, their current task, and overdue tasks. It also displays the last meetings with the residents, and timeline of important items, and a burn-down chart of the remaining tasks. This are all tied to the data and current date which auto fills the tables. The second tab contains the data. This is comprised of lists of rotations and their associated tasks along with their due dates. A signature column was also created which is password protected but allows special subset users i.e. mentors to alter without using a password. Results: The dashboard has allowed residents to better track their progress and tells them what they should be working on. It has also allowed the mentors and the program director to rapid assess their progress. Conclusion: The dashboard is successful and has been created to allow easy addition and subtraction of required tasks as the residency evolves. The next step is to create a web app version of the excel sheet with logins.
61 RADIATION PROTECTION AND DOSIMETRY↗
The LCLStream Ecosystem for Multi-Institutional Dataset Exploration
We describe a new end-to-end experimental data streaming framework designed from the ground up to support new types of applications – AI training, extremely high-rate X-ray time-of-flight analysis, crystal structure determination with distributed processing, and custom data science applications and visualizers yet to be created. Throughout, we use design choices merging cloud microservices with traditional HPC batch execution models for security and flexibility. This project makes a unique contribution to the DOE Integrated Research Infrastructure (IRI) landscape. By creating a flexible, API-driven data request service, we address a significant need for high-speed data streaming sources for the X-ray science data analysis community. With the combination of data request API, mutual authentication web security framework, job queue system, high-rate data buffer, and complementary nature to facility infrastructure, the LCLStreamer framework has prototyped and implemented several new paradigms critical for future generation experiments.
Rogers, David [ORNL] (ORCID:0000000251871768)↗
Cyber Informed Engineering Cie Analysis Tool
Main Benefits: • Collaborate on assessment via the web and access and share assessments on your mobile device. • Helps you maximize your cybersecurity investment and resources • Saves you significant time and money by eliminating the requirement to research each government and industry standard in order to understand your cybersecurity posture • Contains easy to follow, step by step instructions to guide you through the process of identifying the cybersecurity posture of your organization • Provides a place to begin with cybersecurity improvement and a way to prioritize your tasks and budgets. • Covers all major cyber relevant topic areas for a comprehensive assessment of your organization’s cybersecurity posture. • Dives deep into the details of each topic area. • Contributes to the organization's risk management and decision-making process • Highlights vulnerabilities and gaps in your organization's IT and control systems. • Raises awareness and facilitates discussion on cybersecurity within your organization • Educates the controls system community on cyber security.
Hansen, Barry [Idaho National Laboratory (INL), Id↗
AGR-2 Data Qualification Report for ATR Cycles 149B, 150A, 150B, 151A, and 151B
This report provides the data qualification status of AGR-2 fuel irradiation experimental data from Advanced Test Reactor (ATR) cycles 149B, 150A, 150B, 151A, and 151B), as recorded in the Nuclear Data Management and Analysis System (NDMAS). The AGR-2 data streams addressed include thermocouple temperatures, sweep gas data (flow rate, pressure, and moisture content), and fission product monitoring system (FPMS) data for each of the six capsules in the experiment. A total of 3,307,500 5-minute thermocouple and sweep gas data records were received and processed by NDMAS for this period. There are no AGR-2 data for cycle 150A because the experiment was removed from the reactor. Of these data, 82.2% were determined to be Qualified based on NDMAS accuracy testing and data validity assessment. There were 450,557 Failed temperature records due to thermocouple failures, and 138,528 Failed gas flow records due to gas flow cross-talk and leakage problems that occurred in the capsules after cycle 150A. For FPMS data, NDMAS received and processed preliminary release rate and release-to-birth rate ratio (R/B) data for the first three reactor cycles (cycles 149B, 150B, and 151B). This data consists of 45,983 release rate records and 45,235 R/B records for the 12 radionuclides reported. The qualification status of these FPMS data has been set to In Process until receipt of QA-approved data generator reports. All of the above data have been processed and tested using a SAS®-based enterprise application software system, stored in a secure Structured Query Language database, and made available on the NDMAS Web portal (http://ndmas.inl.gov) for both internal and external VHTR project participants.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
AGR-2 Data Qualification Report for ATR Cycles 151B-2, 152A, 152B, 153A, 153B and 154A
This report documents the data qualification status of AGR-2 fuel irradiation experimental data from Advanced Test Reactor (ATR) Cycles 152A, 152B, 153A, 153B, and 154A, as recorded in the Nuclear Data Management and Analysis System (NDMAS). The AGR-2 data streams addressed include thermocouple (TC) temperatures, sweep gas data (flow rate, pressure, and moisture content), and fission product monitoring system (FPMS) data for each of the six capsules in the experiment. A total of 13,400,520 every minute instantaneous TC and sweep gas data records were received and processed by NDMAS for this period. Of these data, 8,911,791 records (66.5% of the total) were determined to be Qualified based on NDMAS accuracy testing and data validity assessment. For temperature, there were 4,266,081 records (74% of the total TC data) that were Failed due to TC instrument failures. For sweep gas flows, there were 222,648 gas flow records (2.91% of the flow data) that were Failed. The inlet gas flow failures due to gas flow cross-talk and leakage problems that occurred after Cycle 150A were corrected by using the same gas mixture in all six capsules and the Leadout. For FPMS data, NDMAS received and processed preliminary release rate and release-to-birth rate ratio (R/B) data for three reactor cycles (Cycles 149B, 150B, and 151A) . This data consists of 45,983 release rate records and 45,235 R/B records for the 12 radionuclides reported. The qualification status of these FPMS data has been set to In Process until receipt of Quality Assurance-approved data generator reports. All of the above data have been processed and tested using a SAS®-based enterprise application software system, stored in a secure Structured Query Language database, made available on the NDMAS Web portal (http://ndmas.inl.gov), and approved by the INL STIM for release to both internal and appropriate external Very High Temperature Reactor Program participants.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Authenticating cache
The aim of the Authenticating Cache architecture is to ensure that machine instructions in a Read Only Memory (ROM) are legitimate from the time the ROM image is signed (immediately after compilation) to the time they are placed in the cache for the processor to consume. The proposed architecture allows the detection of ROM image modifications during distribution or when it is loaded into memory. It also ensures that modified instructions will not execute in the processor-as the cache will not be loaded with a page that fails an integrity check. The authenticity of the instruction stream can also be verified in this architecture. The combination of integrity and authenticity assurance greatly improves the security profile of a system.
97 MATHEMATICS AND COMPUTING↗
Cryptographic Key Management System (CKMS)
This report summarizes the outcome of U.S. Department of Energy (DOE) contract DE-OE0000543, requesting the design of a Cryptographic Key Management System (CKMS) for the secure management of cryptographic keys for the energy sector infrastructure. Prime contractor Sypris Electronics, in collaboration with Oak Ridge National Laboratories (ORNL), Electric Power Research Institute (EPRI), Valicore Technologies, and Purdue University's Center for Education and Research in Information Assurance and Security (CERIAS) and Smart Meter Integration Laboratory (SMIL), has designed, developed and evaluated the CKMS solution. We provide an overview of the project in Section 3, review the core contributions of all contractors in Section 4, and discuss benefits to the DOE in Section 5. In Section 6 we describe the technical construction of the CKMS solution, and review its key contributions in Section 6.9. Section 7 describes the evaluation and demonstration of the CKMS solution in different environments. We summarize the key project objectives in Section 8, list publications resulting from the project in Section 9, and conclude with a discussion on commercialization in Section 10 and future work in Section 11.
97 MATHEMATICS AND COMPUTING↗
Survey of Existing Tools for Formal Verification
Formal methods have come into wide use because of their effectiveness in verifying "safety and security" requirements of digital systems; a set of requirements for which testing is mostly ineffective. Formal methods are routinely used in the design and verification of high-consequence digital systems in industry. This report outlines our work in assessing the capabilities of commercial and open source formal tools and the ways in which they can be leveraged in digital design workflows.
Armstrong, Robert C.↗
Progress to Date on Developing the NUSAM Methodology Document
The same basic steps occur when evaluating the physical protection of nuclear or radiological material in transport against theft or sabotage as are needed for protecting nuclear facilities and nuclear material in use or storage. There are some notable distinctions, however. There are limited layers of protection around material when in transport so that the analysis focuses more on scenario analysis than for fixed sites which may require formal path analysis if the facility has some complexity. In many respects, ground transportation security is more challenging than security at a fixed site. Operation in the public domain is frequently required and the same degree of access limitation is not possible as it is in a protected fixed site. Because of these differences, response force personnel in transit play a more dominant role in the security of a mobile system than they do for a fixed site. In all cases, however, the system time delay that is required to provide the response force the time to react must be provided primarily by transportation vehicle technology elements.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Enabling Technologies for Ultra-Safe and Secure Modular Nuclear Energy
Sandia National Laboratories and General Atomics are pleased to respond to the Advanced Research Projects Agency-Energy (ARPA-e)’s request for information on innovative developments that may overcome various current reactor-technology limitations. The RFI is particularly interested in innovations that enable ultra-safe and secure modular nuclear energy systems. Our response addresses the specific features for reactor designs called out in the RFI, including a brief assessment of the current state of the technologies that would enable each feature and the methods by which they could be best incorporated into a reactor design.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Impact of Clean Energy R&D on the U.S. Power Sector
The U.S. government, along with other governments, private corporations and organizations, invests significantly in research, development, demonstration and deployment (RDD&D) activities in clean energy technologies, in part to achieve the goal of a clean, secure, and reliable energy system. While specific outcomes and breakthroughs resulting from RDD&D investment are unpredictable, it can be instructive to explore the potential impacts of clean energy RDD&D activities in the power sector and to place those impacts in the context of current and anticipated market trends. This analysis builds on and leverages analysis by the U.S. Department of Energy (DOE) titled “Energy CO 2 Emissions Impacts of Clean Energy Technology Innovation and Policy” (DOE 2017). Similar to DOE (2017), we explore how additional improvements in cost and performance of clean energy technologies could impact the future U.S. energy system; however, unlike the economy-wide modeling used in DOE (2017) our analysis is focused solely on the electricity sector and applies a different and more highly spatially-resolved electric sector model. More specifically, we apply a scenario analysis approach to explore how assumed further advancements in clean electricity technologies would impact power sector generation mix, electricity system costs, and power sector carbon dioxide (CO 2 ) emissions.
29 ENERGY PLANNING, POLICY, AND ECONOMY↗
Design and Evaluation of a Secure Virtual Power Plant.
For three years, Sandia National Laboratories, Georgia Institute of Technology, and University of Illinois at Urbana-Champaign investigated a smart grid vision in which renewable-centric Virtual Power Plants (VPPs) provided ancillary services with interoperable distributed energy resources (DER). This team researched, designed, built, and evaluated real-time VPP designs incorporating DER forecasting, stochastic optimization, controls, and cyber security to construct a system capable of delivering reliable ancillary services, which have been traditionally provided by large power plants or other dedicated equipment. VPPs have become possible through an evolving landscape of state and national interconnection standards, which now require DER to include grid-support functionality and communications capabilities. This makes it possible for third party aggregators to provide a range of critical grid services such as voltage regulation, frequency regulation, and contingency reserves to grid operators. This paradigm (a) enables renewable energy, demand response, and energy storage to participate in grid operations and provide grid services, (b) improves grid reliability by providing additional operating reserves for utilities, independent system operators (ISOs), and regional transmission organization (RTOs), and (c) removes renewable energy high-penetration barriers by providing services with photovoltaics and wind resources that traditionally were the jobs of thermal generators. Therefore, it is believed VPP deployment will have far-reaching positive consequences for grid operations and may provide a robust pathway to high penetrations of renewables on US power systems. In this report, we design VPPs to provide a range of grid-support services and demonstrate one VPP which simultaneously provides bulk-system energy and ancillary reserves.
24 POWER TRANSMISSION AND DISTRIBUTION↗
An Initial Investigation of the Design Challenges Associated with Reliable 100GigE Packet Capture
Network security researchers often rely on Emulytics TM to provide a way to evaluate the safety and security of real world systems. This work involves running a large number of virtual machines on a distributed platform to observe how software and hardware will respond to different types of attacks. While Emulytics TM software such as minimega provide a scalable system for conducting experiments, the sheer volume of network traffic produced in an experiment can easily exceed the rate at which data can be recorded for offline analysis. As such, researchers must perform live analytics, narrow their monitoring scope or accept that they must run an experiment multiple times to capture all the information they require. In support of Sandia's commitment to Emulytics TM , we are developing new storage components for the Carlin cluster that will enable researchers to capture significantly more network traffic from their experiments. This report provides a summary of Haoda Wang's initial investigation of how new AMD Epyc storage nodes can be adapted to perform packet capture at 100Gbps speeds with minimal loss. This work found that the NVMe storage capabilities of the Epyc architecture are suitable for capturing 100Gbps Ethernet traffic. While capturing traffic with existing libraries was surprisingly challenging, we were able to develop a DPDK-based software tool that recorded network traffic to disk with minimal packet loss.
97 MATHEMATICS AND COMPUTING↗
Electrification Annual Progress Report (FY2019)
During fiscal year 2019 (FY 2019), the U.S. Department of Energy (DOE) Vehicle Technologies Office (VTO) funded early stage research & development (R&D) projects that address Batteries and Electrification of the U.S. transportation sector. The VTO Electrification Sub-Program is composed of Electric Drive Technologies, and Grid Integration activities. The Electric Drive Technologies group conducts R&D projects that advance electric motors and power electronics technologies. The Grid and Charging Infrastructure group conducts R&D projects that advance grid modernization and electric vehicle charging technologies. This document presents a brief overview of the Electrification Sub-Program and progress reports for its R&D projects. Each of the progress reports provide a project overview and highlights of the technical results that were accomplished in FY 2019.
25 ENERGY STORAGE↗
Risk-Based Dynamic Contingency Analysis Applied to Puerto Rico Electric Infrastructure
The U.S. Department of Energy’s (DOE) Office of Electricity and Office of Energy Efficiency & Renewable Energy have funded DOE National Laboratories to perform modeling, analysis, and high-level design of resilience-enhancement options for the power grid of the Commonwealth of Puerto Rico. The Pacific Northwest National Laboratory (PNNL) is one of the national laboratories contributing to the DOE effort. Under this funding, PNNL completed Phase I of their analysis in 2018, which identified high-priority transmission enhancements derived from detailed dynamic cascading analysis of severe contingencies, including a hurricane scenario example. This report describes additional analysis completed under Phase II, which was performed over 2019. The PNNL team applied decades of experience making complex power systems more resilient, reliable, secure, flexible, affordable and sustainable, with partners in government and industry. In this report, PNNL presents the Phase II analysis, in which a risk-based dynamic contingency analysis approach to evaluate impact of several hurricane scenarios was developed. This approach was used to identify high-priority enhancements and test resilience mitigation actions, including the evaluation of high-solar scenarios developed as a result of the 2019 Puerto Rico Integrated Resource Plan (IRP).
24 POWER TRANSMISSION AND DISTRIBUTION↗